From mboxrd@z Thu Jan 1 00:00:00 1970 From: Patrick McHardy Subject: Re: Performance issue due to constant "modprobes" Date: Mon, 18 Apr 2011 15:38:48 +0200 Message-ID: <4DAC3EE8.5090507@trash.net> References: <4D9E45C2.7030805@wildgooses.com> <4D9F41BA.1060509@wildgooses.com> <4D9F98D3.5070802@wildgooses.com> <4DA0C402.1090809@wildgooses.com> <4DA58A73.9030308@wildgooses.com> <4DA59881.1050501@wildgooses.com> <4DA5D346.5030303@wildgooses.com> Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: QUOTED-PRINTABLE Cc: =?UTF-8?B?TWFjaWVqIMW7ZW5jenlrb3dza2k=?= , Ed W , netfilter-devel@vger.kernel.org To: Jan Engelhardt Return-path: Received: from stinky.trash.net ([213.144.137.162]:43963 "EHLO stinky.trash.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753525Ab1DRNit (ORCPT ); Mon, 18 Apr 2011 09:38:49 -0400 In-Reply-To: Sender: netfilter-devel-owner@vger.kernel.org List-ID: Am 14.04.2011 09:19, schrieb Jan Engelhardt: > On Thursday 2011-04-14 09:13, Maciej =C5=BBenczykowski wrote: >=20 >> Note that: -M '' is -M followed by a space and two single quotes. >> >> Furthermore, note that with -M '', you will want to modprobe ip_tabl= es >> or modprobe ip6_tables manually first at system startup (or build th= em >> into the kernel), since those modules don't autoload (hence why >> iptables tries to load them). >> >> I wonder if there's an easy way iptables userspace could detect >> whether these modules are already loaded (or compiled into the >> kernel), and not even try to load them, if so... >=20 > Not with the socket interface, but it's on the plate for netlink-base= d=20 > Xtables. We do have the /proc/net/ip_tables_{names,matches,targets} files which should be usable for this. -- To unsubscribe from this list: send the line "unsubscribe netfilter-dev= el" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html